Static task
static1
Behavioral task
behavioral1
Sample
668da72d5c595fd81008c2a6e49fe9f6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
668da72d5c595fd81008c2a6e49fe9f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
668da72d5c595fd81008c2a6e49fe9f6_JaffaCakes118
-
Size
48KB
-
MD5
668da72d5c595fd81008c2a6e49fe9f6
-
SHA1
f183c9a3fe9b3c1aee153cbfdcec098e92b7e13c
-
SHA256
ff1ab6b61845ea4b14c1143002256c9aa71891ef5024728a0940a5b14ad140d1
-
SHA512
4d18a662a0defae5efcd1a00e70bced9743ac8468dfefbc5ad3589cbaf48c1b320ab55e8b430a433dbfa2a3a868d68b0a2b090666edc98a3a1f4d50de92f5311
-
SSDEEP
384:wf8rS11ocncoDZSw5Zb/HxAW8xBLHtD30S1Q0EwZw+ZrgKgMv:wkrSLRRDZb5MW8xBLHdjm0EwW8Vr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668da72d5c595fd81008c2a6e49fe9f6_JaffaCakes118
Files
-
668da72d5c595fd81008c2a6e49fe9f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE